; First Page - WINDOWS , Document: JP11184818 

- T^g WPI ===== 

TI - Operator authentication system in internet, intranet - compares user 

input information with information read from IC card and informs server 
about authentication information result 

AB - JP11184818 NOVELTY - The client system (5) has authentication application 
object (19) which receives authentication information from user. The 
input information and information read from IC card (9) are compared to 
produce authentication result file which is also informed to server (11) . 
DETAILED DESCRIPTION - In an IC card (9), predetermined authentication 
information is stored and is read by IC card reader (7) which is 
connected with a client. An INDEPENDENT CLAIM is also included for 
operator authentication procedure in internet. 

- USE - To authenticate client side operator in internet, intranet. 

- ADVANTAGE - Computer operator is confirmed reliably and information 
access is performed with superior security. In client/server environment, 
password control for user identification is unnecessary, hence program 
development is performed easily. DESCRIPTION OF DRAWING (S) - The figure 
shows block diagram of authentication system. (5) Client system; (7) IC 
card reader; (9) IC card; (11) Server; (19) Authentication application 
object . 
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TI - AUTHENTICATION SYSTEM, ITS METHOD AND CLIENT MACHINE FOR THE 
CERTIFICATION SYSTEM 

AB - PROBLEM TO BE SOLVED: To eliminate the need of password management for 
user authentication in a server in a server/client environment and to 
easily develop the program of a certification processing. 

- SOLUTION: A WWW server 11 in a server machine 1 generates a random number 
file 12 and down-loads it in response to an authentication request from a 
WWW browser 15-1 in a client machine 5. When the browser 15-1 receives 
the random number file 12, it starts authentication application 19 and 
sends inputted authentication information to an IC card 9 with random 
numbers 12. When authentication information 21 is collated with the 
random numbers, the authenticated result and the random numbers are 
ciphered and they are transferred to the authentication application 19, 
an HTML document 18 into which ciphered data is buried is generated and a 
browser 15-2 transmits it to the WWW server 11 so as to obtain the 
authenticated result. 
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